$ rpki-client -vvf rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft File: IHRtqWxsk0jpS7t03MtZAcbst7M.mft (raw, json) Hash identifier: +Vu68O7yC12P5cGD7UGkjDfGV50lzT2/ZVho8QZEdBY= Subject key identifier: BD:1A:96:34:18:2E:D5:7A:95:19:36:8B:1A:B5:BF:4F:C2:46:FC:0E Authority key identifier: 20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3 Certificate issuer: /CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3 Certificate serial: 03B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft Manifest number: 03B1 Signing time: Thu 19 Jun 2025 00:33:28 +0000 Manifest this update: Thu 19 Jun 2025 00:33:27 +0000 Manifest next update: Thu 26 Jun 2025 00:33:27 +0000 Files and hashes: 1: IHRtqWxsk0jpS7t03MtZAcbst7M.crl (hash: fPaMkrZryyhw4seN4fTfqChG2wdxuhbrf94USdGIkT0=) 2: FC11F400240611EFA8F45A54C4F9AE02.roa (hash: o33RNCZroDwsAJGcMgsni5M3q2cYV8AkaewWNhrky5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 00:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 952 (0x3b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BD1A, serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3 Validity Not Before: Jun 19 00:33:27 2025 GMT Not After : Jun 26 00:33:27 2025 GMT Subject: CN=68535ad8-3638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a5:ed:1f:36:07:d5:f5:6b:d4:73:8c:5f:65: 98:10:de:51:bb:4e:01:6d:41:af:ec:ce:9b:6e:2d: bb:63:16:8a:6a:61:10:24:32:64:82:7e:8d:84:33: 9e:ce:d8:5a:a9:ec:46:ef:f5:82:25:7d:72:e6:d0: 07:54:db:ad:07:57:39:84:60:34:ff:a4:0c:88:f0: 57:15:7f:8c:10:0d:51:9e:2b:0d:ab:d1:18:65:30: 9f:9b:04:8d:fd:6c:47:fe:ca:84:fa:aa:84:6b:76: c7:58:8d:64:ad:70:a3:64:c1:f6:13:a1:7e:78:37: eb:1d:82:f9:b9:9a:f3:04:be:01:77:65:a3:34:13: a8:6e:e7:ca:95:34:77:6d:36:21:60:88:a6:bb:f9: 76:94:51:fd:4c:dc:2e:a9:5a:78:02:f8:38:0a:b0: 84:1c:21:8c:8a:d5:63:32:e8:fe:1c:72:33:5a:8c: ac:d4:9b:32:f7:49:dd:bd:44:4d:41:2a:4a:82:c7: c6:c6:7d:55:6c:bf:f0:8f:4e:77:12:99:99:e2:27: 04:02:c9:b1:ad:de:7d:f7:9a:23:be:b3:2e:02:54: 49:39:c9:6a:99:da:76:85:48:bb:25:ff:46:70:4b: 3d:bb:ce:f9:ba:08:99:bd:54:30:67:d0:76:e5:13: 18:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1A:96:34:18:2E:D5:7A:95:19:36:8B:1A:B5:BF:4F:C2:46:FC:0E X509v3 Authority Key Identifier: keyid:20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:36:38:1c:83:5f:38:16:83:5e:ed:78:cd:1c:5b:96:4a:56: 44:b7:4e:45:d0:d0:6a:3b:b5:a6:07:a8:79:a4:ad:b7:e0:72: 04:1d:de:b7:ab:10:7f:1c:22:62:ed:4c:39:18:08:3e:fc:e6: 7e:73:eb:80:5e:1e:89:54:1b:ef:0d:a4:5a:53:42:26:a0:4c: 0f:ff:4e:bb:a8:37:b4:62:c2:9e:d1:0b:72:6b:f5:66:f6:4a: ad:74:81:77:11:a2:3b:40:eb:0b:e6:3a:e5:3f:36:93:99:cc: d0:e2:2f:86:36:a8:79:28:81:fa:35:44:7c:01:32:90:ad:28: f4:66:c0:e5:7e:62:3c:92:74:77:48:22:00:90:2a:27:f4:89: 8c:e6:9e:88:b8:15:ce:2a:be:08:39:e6:ee:dd:30:fb:45:81: 40:96:72:e5:74:a2:2c:99:42:45:68:3e:c2:d3:96:ed:f7:1f: 43:72:d7:3e:2a:14:89:e6:2f:59:82:5e:d0:65:55:c7:77:1e: 67:d1:9f:5a:b5:65:02:33:aa:ab:88:68:ce:54:7d:04:f2:58: ce:fa:7f:8f:cd:e7:6b:e2:b8:00:77:0b:ec:0e:1a:ea:3f:9b: ea:51:ee:a0:ec:73:4e:67:f5:a2:f7:64:c9:a2:55:74:61:95: 07:74:36:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJEMUExMTAvBgNVBAUTKDIwNzQ2REE5NkM2QzkzNDhFOTRCQkI3NERDQ0I1OTAx QzZFQ0I3QjMwHhcNMjUwNjE5MDAzMzI3WhcNMjUwNjI2MDAzMzI3WjAYMRYwFAYD VQQDEw02ODUzNWFkOC0zNjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6XtHzYH1fVr1HOMX2WYEN5Ru04BbUGv7M6bbi27YxaKamEQJDJkgn6NhDOe zthaqexG7/WCJX1y5tAHVNutB1c5hGA0/6QMiPBXFX+MEA1RnisNq9EYZTCfmwSN /WxH/sqE+qqEa3bHWI1krXCjZMH2E6F+eDfrHYL5uZrzBL4Bd2WjNBOobufKlTR3 bTYhYIimu/l2lFH9TNwuqVp4Avg4CrCEHCGMitVjMuj+HHIzWoys1Jsy90ndvURN QSpKgsfGxn1VbL/wj053EpmZ4icEAsmxrd5995ojvrMuAlRJOclqmdp2hUi7Jf9G cEs9u875ugiZvVQwZ9B25RMYLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0aljQY LtV6lRk2ixq1v0/CRvwOMB8GA1UdIwQYMBaAFCB0balsbJNI6Uu7dNzLWQHG7Lez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkQxQS80QzZFQUJFODk5 RDgxMUVDQjlFMzU3NkZDNEY5QUUwMi9JSFJ0cVd4c2swanBTN3QwM010WkFjYnN0 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lIUnRxV3hzazBqcFM3dDAzTXRaQWNic3Q3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkQxQS80QzZFQUJFODk5RDgxMUVDQjlFMzU3NkZDNEY5QUUwMi9JSFJ0cVd4c2sw anBTN3QwM010WkFjYnN0N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYNjgcg184FoNe7XjNHFuWSlZEt05F0NBqO7WmB6h5pK234HIEHd63 qxB/HCJi7Uw5GAg+/OZ+c+uAXh6JVBvvDaRaU0ImoEwP/067qDe0YsKe0Qtya/Vm 9kqtdIF3EaI7QOsL5jrlPzaTmczQ4i+GNqh5KIH6NUR8ATKQrSj0ZsDlfmI8knR3 SCIAkCon9ImM5p6IuBXOKr4IOebu3TD7RYFAlnLldKIsmUJFaD7C05bt9x9Dctc+ KhSJ5i9Zgl7QZVXHdx5n0Z9atWUCM6qriGjOVH0E8ljO+n+Pzedr4rgAdwvsDhrq P5vqUe6g7HNOZ/Wi92TJolV0YZUHdDad -----END CERTIFICATE-----Generated at Thu Jun 19 08:34:42 2025 by rpki-client